aws-sts-web-identity-credentials-output
Web-identity role assumption returns temporary AWS credentials to the caller.
Where it sits
| location | AssumeRoleWithWebIdentity.Credentials.SecretAccessKey / SessionToken |
|---|
| location kind | output_value |
|---|
| data kinds | access_key secret_key session_token credential |
|---|
| emits edge | ExposesCredential |
|---|
| service | STS (aws:sts) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | AssumeRoleWithWebIdentity |
|---|
| response path | Credentials.{AccessKeyId,SecretAccessKey,SessionToken} |
|---|
| encoding | json |
|---|
| params | {"RoleArn": "\u003crole-arn\u003e", "RoleSessionName": "\u003csession-name\u003e", "WebIdentityToken": "\u003ctoken\u003e"} |
|---|
Required permissions
sts:AssumeRoleWithWebIdentity
References